Issue 141 - October 2012 (2nd Edition) - Page 14
Yorkshire Building Society - Egg Account Transfer Phishing Scam
Email purporting to be from the Yorkshire Building Society
claims that, due to the transfer of Egg Savings and Mortgage accounts, existing customers are required to update their details by filling in and submitting an attached form.
The Yorkshire Building Society (YBS) did buy part of Internet bank Egg in 2011 and all Egg mortgage and savings accounts must therefore be transferred to the YBS systems. However, this message is not from Yorkshire Building Society and has no connection to the transfer of accounts from Egg. The email is a phishing scam designed to trick account holders into submitting their private personal and financial information to Internet criminals.
Detailed analysis and references below example.
Scroll down to submit comments
Last updated: October 4, 2012
First published: October 4, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer
Subject: Our commitment to online security
From: Yorkshire Building Society
Egg Savings and Mortgage accounts have now been transferred to Yorkshire Building Society's systems.
As a Yorkshire Building Society customer you'll continue to enjoy all the services you used with Egg.
We believe it's important to keep up to date with the latest online security measures, We recently upgraded our database
system for new security measures. We have tried to contact you but have been unable to do so.
Please proceed via attached file to automatically upgrade your details.
If you do not confirm your details until 05 October 2012 your online account will be interrupted for security reasons.
Yorkshire Building Society.
This email, which claims to be from the UK's Yorkshire Building Society (YBS), informs users that, due to the transfer of savings and mortgage accounts from Egg, customers must update their account details by filling in an upgrade form contained in an attached file. The message warns that customers who do not comply with the request to update their information will find that access to their accounts will be "interrupted for security reasons".
However, the email is not from the Yorkshire Building Society and has no connection to the transfer of Egg accounts. Instead, the message
is a phishing scam designed to trick both Yorkshire Building Society and previous Egg customers into divulging their personal and financial data to cybercriminals. Those who comply with the request and open the attached file will be presented with a bogus form that asks for their YBS login credentials as well as credit card information and name and contact details. When users click the "Submit" button on the bogus form, all of this information can be retrieved by the criminals responsible for the phishing attack. The criminals can then use the stolen information to access real YBS accounts and make fraudulent credit card transactions.
In this instance the scammers have attempted to capitalize on a real event
in order to make their claims seem more legitimate. In 2011, the Yorkshire Building Society acquired Internet bank Egg's
savings and mortgage accounts and all existing Egg savings and mortgage accounts were thus required to be transferred to the YBS's own systems. By wrapping their story in a veil of truth, the scammers hope that at least a few YBS and Egg customers will fall for the ruse and supply the requested information.
If you receive this email, or one similar to it, do not follow any links or open any attachments that it may contain. Phishing is a very common scam
that continues to find new victims all around the world every day. Be cautious of any message that claims that you must update or verify your account information by following a link or opening an attached file. Legitimate organizations are unlikely to request sensitive personal information from customers via an unsolicited email. It is best to adopt the simple safety precaution of always logging into your online accounts by entering the account address into your browser's address bar rather than by clicking links.
Yorkshire Building Society and Egg customers can find legitimate information about the transfer of Egg accounts
on the YBS website.
Yorkshire building society to buy Egg's savings and mortgage accounts
Phishing Scams - Anti-Phishing Information
Information for Egg Customers
Pages in this issue:
- ADP 'Transaction Reports' Malware Email
- Facebook 'Virus' Warning Message - Album 92
- Dubious Facebook 'Security Alert' - Obama Nation Hackers
- Johnny Depp is NOT Dead
- Social Media Rumours Falsely Claim Fidel Castro is Dead
- Justin Bieber Stolen Laptop and Camera - Sex Tape Rumours
- 'Interested in Using Your Photo for Pepsi Ad' - Money Laundering Scam
- Hoax - Obama's Cook County Correctional Center
- NatWest 'Customer Satisfaction Survey' Phishing Scam
- Facebook Survey Scam - 'Drunk 17 Year Old Caught on Tape'
- Facebook's Promoted Posts Program for Users Causing Confusion
- 'Little Dead Girl Clarissa' Warning - Nasty and Violent Internet Chain Letter
- Hoax Warning Message - 'National Kill A Pit Bull Day'
- Yorkshire Building Society - Egg Account Transfer Phishing Scam
- Skype 'Password Successfully Changed' Scam Email
- Michael Vick Did NOT Break His Legs in a Car Accident